Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Q2KdAqSb75sFJxbrwdIhqhUiaiM.roa
File: Q2KdAqSb75sFJxbrwdIhqhUiaiM.roa (raw, json)
Hash identifier: F8UuO07rZVsYkEKoN/m61zySpmwfWpxQ5lnEc0+t2ro=
Subject key identifier: 43:62:9D:02:A4:9B:EF:9B:05:27:16:EB:C1:D2:21:AA:15:22:6A:23
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0186FE7775556BA8023570D4022B150BC41E
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Q2KdAqSb75sFJxbrwdIhqhUiaiM.roa
Signing time: Mon 20 Mar 2023 10:01:27 +0000
ROA not before: Mon 20 Mar 2023 10:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44643
IP address blocks: 31.6.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:77:75:55:6b:a8:02:35:70:d4:02:2b:15:0b:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Mar 20 10:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43629d02a49bef9b052716ebc1d221aa15226a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:d8:65:43:5d:f8:84:f9:81:e5:20:7e:6b:
13:a8:c8:58:82:c3:d6:1e:9c:13:b3:4d:15:fb:a0:
55:8d:0c:f1:6b:0a:e2:4b:09:b3:a6:38:77:3e:79:
a8:f0:71:a7:45:62:b2:6a:0d:66:b8:20:97:03:24:
cb:1f:3c:18:dd:30:1f:71:99:cb:fd:87:3a:3a:74:
a9:30:72:85:13:a5:a4:9d:5d:38:14:72:7c:9a:8a:
aa:86:ce:28:98:78:60:8c:67:d5:1d:2e:06:bb:31:
c7:21:a9:87:ed:68:bc:10:7a:a1:7b:c8:c8:46:c5:
4b:51:55:2c:79:15:35:35:f6:db:3b:2c:f5:e2:42:
e4:99:a3:c7:96:9b:cd:53:9a:5a:78:fc:a2:bf:3b:
51:30:ee:cd:a3:ab:f7:8c:0f:03:23:8d:20:29:21:
0d:ff:39:14:97:e2:e5:ed:67:a0:b6:75:69:49:10:
4f:84:09:7d:69:44:3b:82:17:ae:82:c5:a7:f2:93:
5d:e3:33:5a:18:41:40:9e:a7:d4:6f:a6:7a:13:cc:
06:d3:e3:33:c0:27:0a:33:35:af:47:31:94:00:0c:
4f:34:3a:51:93:9b:5a:bd:db:b0:2c:d9:8b:9d:ae:
00:89:92:cf:09:fd:25:6b:47:80:81:cf:70:be:61:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:9D:02:A4:9B:EF:9B:05:27:16:EB:C1:D2:21:AA:15:22:6A:23
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Q2KdAqSb75sFJxbrwdIhqhUiaiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.248.0/22
Signature Algorithm: sha256WithRSAEncryption
32:0e:3a:d3:16:38:b2:cb:db:20:b6:09:5c:b9:6b:41:e1:0f:
04:ee:c4:f2:b1:db:14:80:7c:30:f4:33:61:3c:a0:1a:6b:ae:
6a:95:6c:69:38:7b:db:03:04:57:f5:91:3f:ae:d3:f9:ed:5c:
63:2a:53:bd:e0:82:af:67:fb:c1:22:a6:17:7f:3c:21:a3:57:
97:f5:19:9e:07:3e:1c:39:83:e3:0a:d4:54:ea:db:2e:30:c6:
df:4f:1c:80:e4:b4:8f:4c:ca:8e:9b:0c:eb:20:e7:93:90:2b:
c4:c8:a3:63:58:36:36:ac:88:0e:16:7f:7f:60:98:7b:8a:71:
04:55:0b:08:8b:5b:7f:a4:e0:f4:a6:53:94:73:1c:b4:2a:6c:
17:fb:38:fb:0d:80:4f:0c:04:b4:90:02:a7:a2:cd:1e:16:82:
13:9d:ab:02:8f:19:25:52:3f:70:1a:f8:59:85:dd:2c:a7:d1:
55:1b:bc:25:83:d4:32:83:c2:f8:03:a9:27:05:e4:0b:67:28:
80:1c:e3:4e:15:15:58:a8:fe:5f:e3:f9:a5:7d:4f:18:1b:0f:
08:08:2a:f1:3a:12:bd:e3:37:ca:c4:33:6e:bd:22:a6:dd:f8:
0e:94:cc:b2:64:9c:21:7c:3c:61:c5:55:12:b3:64:10:88:58:
dd:a6:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:19:07 2025 by rpki-client